← All credits
Jarno Vos (jrn5151) | Patchstack Bug Bounty Program
33 vulnerability records and advisories credit this contributor.
CVE-2025-68867
WordPress Effect Maker plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68850
WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability
CVE-2025-62977
WordPress 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin <= 2.1.4 - Broken Access Control vulnerability
CVE-2025-68060
WordPress Team Member plugin <= 8.5 - SQL Injection vulnerability
CVE-2026-25470
WordPress ACPT (Pro) - Custom Post Types plugin for WordPress plugin < 2.0.52 - Remote Code Execution (RCE) vulnerability
CVE-2026-73185
WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
CVE-2026-57650
WordPress Magazine Blocks plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25446
WordPress WishList Member X plugin <= 3.29.0 - Arbitrary File Upload vulnerability
CVE-2026-40724
WordPress Client Portal (Pro) plugin <= 5.6.2 - Arbitrary File Download vulnerability
CVE-2026-34901
WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability